bhanuuu

SOC Analyst L1 & L2

Hyderabad 1+ yrs exp 84 · Excellent

About

Having 1.6+ years of experience as a SOC ANALYST L1 & L2 in the field of Cyber security Operations for 24*7 SOC environment using the SIEM tools Crowdstrike NG-SIEM, Azure Sentinel Splunk Enterprise, ELK, Microsoft XDR, EntraID, Palo Alto XSOAR, Qualys Guard VMDR, Netskope & CrowdStrike DLP, MS Purview DLP, Crowdstrike XDR, Cisco AMP XDR and Mimecast email gateway.

Skills & Expertise (17)

CrowdStrike NG-SIEM Intermediate

7.3/10

1.6

Years Exp

Azure Active Directory Intermediate

7.3/10

1.6

Years Exp

Microsoft Purview Intermediate

7.3/10

1.6

Years Exp

Netskope DLP Intermediate

7.3/10

1.6

Years Exp

Cisco IronPort Intermediate

7.3/10

1.6

Years Exp

Mimecast Email Gateway Intermediate

7.3/10

1.6

Years Exp

Nexpose Intermediate

7.3/10

1.6

Years Exp

Tenable Nessus Intermediate

7.3/10

1.6

Years Exp

Qualys Guard VMDR Intermediate

7.3/10

1.6

Years Exp

Palo Alto Cortex XSOAR Intermediate

7.3/10

1.6

Years Exp

Microsoft XDR Intermediate

7.3/10

1.6

Years Exp

Sophos MDR Intermediate

7.3/10

1.6

Years Exp

Azure Sentinel Intermediate

7.3/10

1.6

Years Exp

Splunk Enterprise Intermediate

7.3/10

1.6

Years Exp

ServiceNow Intermediate

6.8/10

1.6

Years Exp

Zendesk Intermediate

6.8/10

1.6

Years Exp

Zerofox Intermediate

6.8/10

1.6

Years Exp

Work Experience

SOC Analyst L1 & L2

NTT Data (MSSP)

Nov 2024 - Present

Perform root-cause analysis of incident and working with eradication upon client approvals. Working with CS NG-SIEM integration, and create dashboards and Security correlation rules. Perform threat hunting to identify adversaries’ tactics and techniques and working with client hunting tasks on daily basis. Serving as the DLP SME, responsible for monitoring and analyzing data loss prevention events including web uploads, USB file transfers, and email release requests. Ensuring policy compliance and validating user activities to mitigate data exfiltration risks. Actively monitoring and investigating security events from multiple log sources (Firewalls, IDS/IPS, Endpoint, Proxy, Servers) using XSOAR, Elastic and CrowdStrike. Perform initial triage, in-depth analysis, and threat validation of alerts related to malware, phishing, data exfiltration, and lateral movement. Collaborate with clients, SPOCs, and vendors via bridge calls to manage high-severity security incidents, ensuring timely containment, remediation, and effective communication. Conducted malware and phishing investigations, email header analysis, and IOC Fine tuning.